IBM Fundamentals of Applying IBM Security Systems Identity and Access Assurance Sample Questions:

1. Which two statements are relevant when planning a scalable Security Access Manager for Enterprise Single Sign-On deployment? (Choose two.)

A) As the number of users increases, appropriate sizing and tuning become very important.
B) Fingerprint authentication is not supported in a virtual appliance deployment.
C) A clustered deployment of Websphere Application Servers allows for easy addition of IMS servers.
D) A combination of AD and other LDAP directory servers is not supported and you must select one or the other.
E) A single instance of IMS server on a Websphere Application Server is all that is required.

2. A division is a part of the federal ministry of commerce in Country A.
The federal ministry of taxes is the designated identity provider (IdP) for all ministries in Country A.
The division wants to use this IdP functionality for their new web portal to improve the compensation requests. The new web portal is the most important business project at this division.
The security officer of the division wants to resolve the problem of accumulated access rights for all employees at the division. He also needs to streamline the approvals for access to financial applications.
The security officer found out that audit trails of the financial applications are not centrally collected, and not used for any reporting.
Which combination of products out of the IBM Security Identity and Access Assurance offering would you recommend to be implemented?

A) QRadar SIEM, Tivoli Federated Identity Manager, IBM Security Access Manager for Web
B) QRadar Log Manager. Tivoli Federated Identity Manager. IBM Security Identity Manager
C) QRadar SIEM. IBM Security Identity Manager. Tivoli Federated Identity Manager
D) QRader Log Manager, IBM Security Access Manager for Web. Tivoli Federated Identity Manager

3. A company is in the process of extending the setup of its master-replica directory server environment to include more subtrees to meet the growing needs of the organization.
What can be used to add subtrees to the existing setup using web admin tool?

A) Directory Management > Manage Topology > Add Subtree
B) Directory Management > Manage Directory > Add Subtree
C) Replication Management > Manage Directory > Add Subtree
D) Replication Management > Manage Topology > Add Subtree

4. Which three points of contact configuration options are available when installing IBM Tivoli Federated Identity Manager? (Choose three.)

A) Generic point of contact server
B) Internet Information Services
C) WebSEAL
D) JBoss Application Server
E) IBM WebSphere Application Server
F) Apache Tomcat Application Server

5. A customer is not allowing the usage of self-signed certificates in its production environment. The customer has its own Public Key Infrastructure (PKI), and all certificates should be issued by this Certification Authority using their internal processes.
What needs to be done when going into production with the IBM Security products from the Identity and Access Assurance software bundle?

A) Use the IBM keytool to reconfigure all communication channels to use one single certificate issued by the Certification Authority of the Customer. Put the Certification Authority certificate in the truststore of the keytool.
B) Configure all security components to use the PKI from the customer. Required certificates will automatically be generated and trusted during installation.
C) Identify all communication channels using SSL, and create Certificate Signing Requests for them. After receiving the certificates, configure all secure communication channels to use these certificates, and install the Certification Authority certificate in the truststore of all involved components.
D) Identity all communication channels using SSL, and extract the involved self-signed certificates. Submit these to the Certification Authority of the customer to be cross-signed. Reconfigure the communication channels to use these new certificates and put the Certification Authority certificate in the truststore of all involved components.

Solutions: